Premium Raw Amber

1. Controller

The controller responsible for the processing of personal data on this website is:

2. Privacy-first website operation

This website is operated with a strict privacy-first approach.

Raw-Amber.com is a static B2B presentation and contact website. It does not operate as a public online shop and does not use an automated checkout system.

We do not use:

• Google Analytics
• Meta Pixel
• advertising cookies
• tracking cookies
• profiling tools
• external tracking scripts
• Google Fonts
• YouTube embeds
• social media tracking widgets
• third-party marketing technologies
• newsletter tracking
• automated user profiling

All resources required to display this website are hosted through our own server environment. Images, videos, fonts, graphics, documents and website materials are stored locally on our server environment and are not loaded from third-party marketing or tracking providers.

3. No cookie banner

This website does not use non-essential cookies, advertising cookies, analytics cookies, tracking cookies or comparable technologies requiring prior consent.

For this reason, no cookie banner is displayed.

If we introduce any consent-based technology in the future, such as analytics, external media embeds, tracking tools or non-essential cookies, we will update this Privacy Policy and request consent where legally required.

4. Hosting and server logs

This website is hosted through STRATO.

A data processing agreement with the hosting provider is in place.

When you visit this website, technical server access logs may be processed by the hosting provider for technical delivery, security, error analysis and stability of the website.

Server logs may include:

• IP address
• date and time of access
• requested file or page
• browser type and version
• operating system
• referrer URL, if transmitted
• amount of data transferred
• access status or error codes

These logs are not used by us for marketing, profiling or visitor tracking.

The legal basis for this processing is our legitimate interest in secure, stable and technically functional website operation pursuant to Article 6(1)(f) GDPR.

5. Contact by email

If you contact us by email, we process the personal data you voluntarily provide.

This may include:

• name
• company name
• email address
• telephone number, if provided
• country
• business role
• content of your message
• commercial inquiry details
• documents or files you choose to send
• communication history

We process this data to answer your inquiry, prepare commercial communication, evaluate buyer qualification, prepare offers, clarify available lots, arrange inspection, discuss payment and shipment terms, and carry out pre-contractual or contractual steps.

The legal basis is Article 6(1)(b) GDPR where processing is necessary for pre-contractual or contractual steps, Article 6(1)(f) GDPR where processing is necessary for legitimate business communication, and Article 6(1)(c) GDPR where legal obligations apply.

6. Contact by WhatsApp

If you contact us via WhatsApp, the data you provide through WhatsApp will be processed for communication purposes.

Please note that WhatsApp is operated by a third-party provider and may process personal data under its own terms and privacy policy. We do not control WhatsApp’s independent data processing.

If you do not want to use WhatsApp, please contact us by email instead.

We do not use WhatsApp tracking widgets on this website.

7. Buyer qualification and commercial verification

For serious B2B inquiries, we may process information necessary to evaluate whether a buyer is commercially qualified.

This may include:

• business identity
• company information
• buyer role
• country and destination
• intended purchase volume
• inspection arrangements
• proof of funds, bank reference or comparable commercial verification, where appropriate
• compliance-relevant information

The purpose is to protect both parties, avoid fraudulent transactions, prevent informal or undocumented deals, comply with sanctions and export restrictions, and ensure that access to selected material is granted only to serious commercial buyers.

The legal basis is Article 6(1)(b) GDPR for pre-contractual steps, Article 6(1)(c) GDPR for legal obligations where applicable, and Article 6(1)(f) GDPR for legitimate business, fraud prevention and compliance interests.

8. Commercial transactions, invoices and shipment

If a commercial transaction is agreed, we may process data necessary for:

• offers
• proforma invoices
• contracts
• payment confirmation
• official invoices
• accounting
• shipment preparation
• customs documentation
• export handling
• legal and tax compliance
• transaction documentation

This may include:

• name
• company name
• billing address
• shipping address
• VAT or tax details
• payment references
• bank-related transaction information
• customs-relevant data
• contact details
• order and lot details

The legal basis is Article 6(1)(b) GDPR for contract performance, Article 6(1)(c) GDPR for legal obligations, and Article 6(1)(f) GDPR for legitimate business documentation and legal protection.

9. Compliance and sanctions checks

We do not sell or ship to sanctioned parties, restricted destinations or buyers who cannot pass basic commercial and compliance review.

Where necessary, we may process buyer, company, country, destination and transaction information to evaluate legal, sanctions, customs or export-related restrictions.

The legal basis is Article 6(1)(c) GDPR where legal obligations apply and Article 6(1)(f) GDPR for our legitimate interest in lawful and secure commercial activity.

10. No sale of personal data

We do not sell, rent or trade personal data to third parties.

We do not create marketing profiles and we do not use personal data for advertising tracking.

11. Recipients of personal data

Personal data may be shared only where necessary with:

• hosting provider
• email service provider
• tax advisor or accountant
• legal advisor, where required
• payment service or bank
• courier, freight forwarder or logistics provider
• customs broker or customs authority
• competent public authorities, where legally required
• business partners involved in official sale, invoicing or export handling

Data is shared only to the extent necessary for the relevant purpose.

12. International data transfers

As a rule, our website is operated without third-party tracking or marketing tools and without unnecessary international data transfers.

If a buyer is located outside the European Economic Area, personal data may be processed or transmitted where necessary to answer inquiries, prepare offers, arrange commercial transactions, process shipment or fulfil customs and export requirements.

Such transfers are made only where necessary for the requested commercial relationship, legal obligations or transaction handling.

13. Data retention

We retain personal data only for as long as necessary for the relevant purpose.

General inquiries may be retained for as long as necessary to answer the inquiry and manage subsequent communication.

Commercial transaction data, invoices, tax-relevant documents and business records may be retained for the statutory retention periods applicable under tax, accounting and commercial law.

Compliance-relevant documentation may be retained where necessary to prove lawful transaction handling, prevent fraud, defend legal claims or comply with legal obligations.

Server logs are retained only as long as necessary for technical operation, security and stability, according to the hosting provider’s technical and legal requirements.

14. Your rights under GDPR

Subject to the legal requirements, you have the following rights:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object to processing based on legitimate interests
• right to withdraw consent, where processing is based on consent
• right to lodge a complaint with a supervisory authority

To exercise your rights, please contact: info@raw-amber.com

15. Right to object

Where we process personal data based on legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.

We will stop processing the data unless we can demonstrate compelling legitimate grounds for the processing or the processing is necessary for the establishment, exercise or defence of legal claims.

16. No automated decision-making

We do not use automated decision-making within the meaning of Article 22 GDPR.

We do not use profiling tools for automated commercial decisions.

17. Data security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access to business communication and transaction data is limited to persons and service providers who need such access for legitimate business, legal, accounting, logistics or compliance purposes.

18. External links

This website may contain links to external websites or references to third-party sources.

We are not responsible for the content, security or privacy practices of external websites. Please review the privacy policies of external websites before using them.

19. Updates to this Privacy Policy

We may update this Privacy Policy if legal, technical or operational circumstances change.

The current version is published on this website.

For privacy-related questions, please contact: info@raw-amber.com